Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: txnBD2FnZcS4vvir3cJzABBd3EO/3NNMKAT5gYMNUtA=
Subject key identifier: 5D:82:15:DC:7C:55:78:51:FF:F0:11:6A:38:D4:F2:27:4A:51:67:02
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019CABD9B5E776C3075C0B37B91C31CB06CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0F2B
Signing time: Mon 02 Mar 2026 00:01:37 +0000
Manifest this update: Mon 02 Mar 2026 00:01:37 +0000
Manifest next update: Tue 03 Mar 2026 00:01:37 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: 2HSBRVEk10gvsvasM653CslMmJ8CrO9n8Pol/k0ygGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b5:e7:76:c3:07:5c:0b:37:b9:1c:31:cb:06:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Mar 2 00:01:37 2026 GMT
Not After : Mar 3 00:01:37 2026 GMT
Subject: CN=5d8215dc7c557851fff0116a38d4f2274a516702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:e7:34:e6:fd:de:e1:5a:09:09:4c:d0:57:
90:c9:57:90:89:78:80:1d:9f:ad:c1:bf:ec:ab:3c:
c7:a8:f2:33:bd:ff:5d:f4:75:be:31:71:f3:73:37:
91:77:20:a3:e2:69:4b:ca:b3:2f:46:50:1c:63:f9:
e5:1c:62:87:8f:b0:a4:8f:9e:76:2b:19:23:b6:48:
48:23:16:53:6b:56:a9:4f:85:e3:dc:de:87:ef:37:
f7:92:63:a5:27:6f:79:51:9e:1b:a2:f9:f9:96:63:
07:8e:2c:73:f8:7d:34:62:5a:8f:f3:95:ab:41:da:
d6:56:d9:1e:5d:d1:d6:e2:79:3b:25:d1:05:94:de:
7a:33:63:37:2e:66:4d:1d:07:ab:b6:25:e0:a8:a3:
6e:84:d6:ef:e3:4b:1d:27:e7:bb:ea:ba:9c:13:21:
37:cf:77:1b:fc:66:03:c5:48:8c:68:3a:6b:58:5f:
49:0b:51:34:81:c1:90:8c:4b:e0:4c:77:51:e3:e1:
7f:43:59:07:02:24:4f:42:cd:a6:d2:49:b2:dd:28:
aa:04:11:41:5e:28:d0:1f:89:21:67:cd:eb:4c:fc:
98:fc:82:0a:4a:f8:2e:1a:85:9b:5a:3b:be:53:eb:
c4:94:10:7c:1b:80:15:db:15:0d:ea:fd:e5:00:b4:
c8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:82:15:DC:7C:55:78:51:FF:F0:11:6A:38:D4:F2:27:4A:51:67:02
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b6:31:80:0b:38:28:00:32:3b:be:d4:f2:67:7a:b7:cd:3d:
ff:10:9e:ed:62:92:c3:18:c7:59:97:48:2f:66:4e:5c:da:7e:
39:84:6e:70:e9:04:ba:d1:54:4d:bb:25:ee:e9:19:2b:6a:17:
23:1a:10:35:c3:7f:7d:e1:59:2a:8c:e2:c1:c0:14:2b:16:71:
45:70:5d:97:99:28:f6:dd:ec:42:06:f7:52:64:60:63:1d:41:
f3:73:ed:28:56:8f:45:bc:28:90:16:16:d7:3b:8a:e3:73:99:
9a:e1:7c:08:09:71:40:f5:bb:4c:11:6b:04:af:db:a3:ae:31:
7c:70:96:24:41:4a:21:ff:49:05:52:2d:d5:d5:95:4b:be:c9:
24:86:96:b9:79:ed:e0:63:09:85:4a:ae:0b:1f:c9:d2:ee:8f:
72:fe:00:9f:c4:43:25:9a:80:c5:d1:93:06:f0:58:c0:c0:6c:
34:ad:bb:3b:25:c8:3f:04:73:8f:e6:60:a0:60:69:26:e5:27:
0c:05:15:ad:69:85:4f:b8:a3:a0:37:02:97:c7:9c:c0:d9:74:
74:a5:23:32:bf:20:6f:7b:fd:7a:07:c7:0b:9d:fc:67:ca:0f:
24:d6:2f:ae:3d:03:44:3c:47:dc:e3:d6:77:a5:4a:34:d1:68:
e5:aa:12:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:50 2026 by rpki-client